General

  • Target

    mapleC2.exe

  • Size

    229KB

  • MD5

    8fdc5324c6283723749bec8199a6078e

  • SHA1

    d9480e0b5d4dffbc82f542c66d3f0efc0f18c95c

  • SHA256

    10fc7787e75df4375d177ade5d874691e815204bba4034b54a2b053ad26a1f0d

  • SHA512

    f375bec52dfd7f6f86db525a734c9331152975ad43633b77fc2fb0df31c4e3e408410ab14262fc9f6af650f8ae6c1fa15583c7828cdf0b1ade1c9be6548ae3f4

  • SSDEEP

    6144:tloZM0rIkd8g+EtXHkv/iD4JRBJoOJBidHaIJtMVtb8e1mj5i:voZDL+EP8JRBJoOJBidHaIJtMfkg

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1330716271255228609/IJ5fctnpAI0-OKdKe8_9HLUXRtWL-GkV2v5ywlG5lY-o4zpL4fVuVLWaxhsjb0VEPBe3

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mapleC2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections